composer update james-heinrich/getid3 - fix bug & improved XXE fix

Fixes an error that raises a PHP fatal.

To test this: just check if the previews of music files still work.

cc @wakeup @fossxplorer @jbtbnl @georgehrke 

cc @LukasReschke Security fix included (see changelog)